Search

Find a vulnerability

Search criteria

    2 vulnerabilities by Shanghai Xi Yu Ji Zhi Technology

    CVE-2026-120275 (GCVE-0-2026-120275)

    Vulnerability from nvd – Published: 2026-11-01 23:00 – Updated: 2026-11-02 14:29
    VLAI
    Title
    Shanghai Xi Yu Ji Zhi Technology Minimax Code Find os command injection
    Summary
    A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8. This affects an unknown part of the component Find Command Handler. The manipulation of the argument -exec results in os command injection. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.
    Severity
    5.1 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
    5.5 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C
    5.5 (Medium)
    CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-11-02 14:29 UTC
    CWE
    Assigner
    VulDB CNA under the mitre root
    CNA scorecard B 83/100 over 3789 records in the last 180 days details
    References
    URL Tags
    https://vuldb.com/vuln/429619 vdb-entrytechnical-description
    https://vuldb.com/vuln/429619/cti signaturepermissions-required
    https://vuldb.com/cve/CVE-2026-120275 third-party-advisory
    https://vuldb.com/submit/1007426 third-party-advisory
    https://mcniyfj5bw9b.feishu.cn/docx/RenxdtY52oBlq… related
    Impacted products
    Vendor Product Version
    Shanghai Xi Yu Ji Zhi Technology Minimax Code Affected: 0.5.8
        cpe:2.3:a:shanghai_xi_yu_ji_zhi_technology:minimax_code:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Credits
    ShiyuFan_BinYuan (VulDB User) VulDB CNA Team
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-120275",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-11-02T14:29:40.458866Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-11-02T14:29:53.950Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:shanghai_xi_yu_ji_zhi_technology:minimax_code:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Find Command Handler"
          ],
          "product": "Minimax Code",
          "vendor": "Shanghai Xi Yu Ji Zhi Technology",
          "versions": [
            {
              "status": "affected",
              "version": "0.5.8"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "ShiyuFan_BinYuan (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8. This affects an unknown part of the component Find Command Handler. The manipulation of the argument -exec results in os command injection. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 6.5,
            "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:ND/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "OS Command Injection",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-77",
              "description": "Command Injection",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-01T23:00:36.369Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-429619 | Shanghai Xi Yu Ji Zhi Technology Minimax Code Find os command injection",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/429619"
        },
        {
          "name": "VDB-429619 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/429619/cti"
        },
        {
          "name": "CVE-2026-120275 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-120275"
        },
        {
          "name": "Submit #1007426 | \u4e0a\u6d77\u7a00\u5b87\u6781\u667a\u79d1\u6280\u6709\u9650\u516c\u53f8 Minimax code MiniMax Code mcode 0.5.8 Minimax code Find\u8fc7\u6ee4\u4e0d\u5f53 \u4efb\u610f\u547d\u4ee4\u6267\u884c\u4efb\u610f\u6587\u4ef6\u7f16\u8f91\u5ba1\u6279\u7ed5\u8fc7",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/1007426"
        },
        {
          "tags": [
            "related"
          ],
          "url": "https://mcniyfj5bw9b.feishu.cn/docx/RenxdtY52oBlqRxN4S7csZtNnUc"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-11-01T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-11-01T01:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-11-01T08:42:08.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "Shanghai Xi Yu Ji Zhi Technology Minimax Code Find os command injection",
      "x_generator": [
        "VulDB PVTS v202611"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-120275",
    "datePublished": "2026-11-01T23:00:36.369Z",
    "dateReserved": "2026-11-01T07:36:57.867Z",
    "dateUpdated": "2026-11-02T14:29:53.950Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-120275 (GCVE-0-2026-120275)

    Vulnerability from cvelistv5 – Published: 2026-11-01 23:00 – Updated: 2026-11-02 14:29
    VLAI
    Title
    Shanghai Xi Yu Ji Zhi Technology Minimax Code Find os command injection
    Summary
    A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8. This affects an unknown part of the component Find Command Handler. The manipulation of the argument -exec results in os command injection. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.
    Severity
    5.1 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
    5.5 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C
    5.5 (Medium)
    CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-11-02 14:29 UTC
    CWE
    Assigner
    VulDB CNA under the mitre root
    CNA scorecard B 83/100 over 3789 records in the last 180 days details
    References
    URL Tags
    https://vuldb.com/vuln/429619 vdb-entrytechnical-description
    https://vuldb.com/vuln/429619/cti signaturepermissions-required
    https://vuldb.com/cve/CVE-2026-120275 third-party-advisory
    https://vuldb.com/submit/1007426 third-party-advisory
    https://mcniyfj5bw9b.feishu.cn/docx/RenxdtY52oBlq… related
    Impacted products
    Vendor Product Version
    Shanghai Xi Yu Ji Zhi Technology Minimax Code Affected: 0.5.8
        cpe:2.3:a:shanghai_xi_yu_ji_zhi_technology:minimax_code:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Credits
    ShiyuFan_BinYuan (VulDB User) VulDB CNA Team
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-120275",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-11-02T14:29:40.458866Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-11-02T14:29:53.950Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:shanghai_xi_yu_ji_zhi_technology:minimax_code:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Find Command Handler"
          ],
          "product": "Minimax Code",
          "vendor": "Shanghai Xi Yu Ji Zhi Technology",
          "versions": [
            {
              "status": "affected",
              "version": "0.5.8"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "ShiyuFan_BinYuan (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8. This affects an unknown part of the component Find Command Handler. The manipulation of the argument -exec results in os command injection. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 6.5,
            "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:ND/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "OS Command Injection",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-77",
              "description": "Command Injection",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-01T23:00:36.369Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-429619 | Shanghai Xi Yu Ji Zhi Technology Minimax Code Find os command injection",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/429619"
        },
        {
          "name": "VDB-429619 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/429619/cti"
        },
        {
          "name": "CVE-2026-120275 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-120275"
        },
        {
          "name": "Submit #1007426 | \u4e0a\u6d77\u7a00\u5b87\u6781\u667a\u79d1\u6280\u6709\u9650\u516c\u53f8 Minimax code MiniMax Code mcode 0.5.8 Minimax code Find\u8fc7\u6ee4\u4e0d\u5f53 \u4efb\u610f\u547d\u4ee4\u6267\u884c\u4efb\u610f\u6587\u4ef6\u7f16\u8f91\u5ba1\u6279\u7ed5\u8fc7",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/1007426"
        },
        {
          "tags": [
            "related"
          ],
          "url": "https://mcniyfj5bw9b.feishu.cn/docx/RenxdtY52oBlqRxN4S7csZtNnUc"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-11-01T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-11-01T01:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-11-01T08:42:08.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "Shanghai Xi Yu Ji Zhi Technology Minimax Code Find os command injection",
      "x_generator": [
        "VulDB PVTS v202611"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-120275",
    "datePublished": "2026-11-01T23:00:36.369Z",
    "dateReserved": "2026-11-01T07:36:57.867Z",
    "dateUpdated": "2026-11-02T14:29:53.950Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}